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Question: 1 


HOT SPOT 

You manage an Azure Service Bus for your company. You plan to enable access to the Azure Service 
Bus for an application named ContosoLOB. 

You need to create a new shared access policy for subscriptions and queues that has the following 
requirements: 

Receives messages from a queue 

Deadletters a message 

Defers a message for later retrieval 

Enumerates subscriptions 

Gets subscription description 

In the table below, identify the permission you need to assign to ensure that ContosoLOB is able to 
accomplish the above requirements. Make only one selection in each column. 


Answer Area 


Access Level Subscriptions 


Answer: 
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Answer Area 


Access Level subscriptions 


send 


Listen 


Manage 


Explanation: 

For Service Bus, the three permission claims are ‘Send’ for all send operations, ‘Listen’ to open up 
listeners or receive messages, and ‘Manage’ to observe or manage the state of the Service Bus 
tenant. 

To receive a message from a queue we need to have Listen access level. 

To numerate subscriptions, we need to have the manage access level. 

References: 

http://msdn.microsoft.com/en-us/library/azure/hh403962.aspx 


Question: 2 


Your network includes a legacy application named LegacyApp1. The application only runs in the 
Microsoft .NET 3.5 Framework on Windows Server 2008. 

You plan to deploy to Azure Cloud Services. 

You need to ensure that LegacyApp1 will run correctly in the new environment. 

What are two possible ways to achieve this goal? Each correct answer presents a complete solution. 


A. Upload a VHD with Windows Server 2008 installed. 

B. Deploy LegacyApp1 to a cloud service instance configured with Guest OS Family 2. 
C. Deploy LegacyApp1 to a cloud service instance configured with Guest OS Family 1. 
D. Deploy LegacyApp1 to a cloud service instance configured with Guest OS Family 3. 


Answer: A,B 


Explanation: 
B: Guest OS Family 3 and Guest OS Family 4 supports .NET 4.0 and .Net 4.5. 
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Question: 3 


DRAG DROP 

You administer a cloud service named contosoapp that has a web role and worker role. 

Contosoapp requires you to perform an in-place upgrade to the service. 

You need to ensure that at least six worker role instances and eight web role instances are available 
when you apply upgrades to the service. You also need to ensure that updates are completed for all 
instances by using the least amount of time. 

Which value should you use with each configuration? To answer, drag the appropriate value to the 
correct configuration. Each value may be used once, more than once, or not at all. You may need to 
drag the split bar between panes or scroll to view content. 


Values Configuration 


Web role instances value 


A G Worker role instances eia 
6 g : 
Upgrade domains value 
12 
Answer: 
Configuration 
Web role instances 12 


Worker role instances 


Upgrade domains 
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Explanation: 

* You need to ensure that at least six worker role instances and eight web role instances are available 
when you apply upgrades to the service. 

* You can decide whether you want to update all of the roles in your service or a single role in the 
service. In either case, all instances of each role that is being upgraded and belong to the first 
upgrade domain are stopped, upgraded, and brought back online. Once they are back online, the 
instances in the second upgrade domain are stopped, upgraded, and brought back online. 
References: 

http://msdn.microsoft.com/en-us/library/azure/hh472157.aspx#proceed 


Question: 4 


You migrate a Windows Server .NET web application to Azure Cloud Services. 
You need enable trace logging for the application. 
Which two actions should you perform? Each correct answer presents part of the solution. 


A. Update the service definition file. 

B. Update the Azure diagnostics configuration. 
C. Update the service configuration file. 

D. Enable verbose monitoring. 

E. Update the application web.config file. 


Answer: A,B 


Explanation: 

A: Step 1 section: 

“diagnostics monitor is imported into a role by specifying an Import element with a module Name of 
“Diagnostics” in the Imports section of the service definition file” 

B: Step 2 explain how to add the diagnostic file in the solution and step 3 how to configure it. 
References: 

https://msdn.microsoft.com/en-us/library/azure/Dn482131.aspx#BKMK_step5 


Question: 5 


You manage a cloud service that is running in two small instances. The cloud service hosts a help 
desk application. The application utilizes a virtual network connection to synchronize data to the 
company's internal accounting system. 

You need to reduce the amount of time required for data synchronization. 

What should you do? 


A. Configure the servers as large instances and re-deploy. 
B. Increase the instance count to three. 

C. Deploy the application to Azure Web Sites. 

D. Increase the processors allocated to the instances. 


Answer: A 
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Explanation: 


References: http://msdn.microsoft.com/en-us/library/azure/dn197896.aspx 


Question: 6 


You manage a cloud service that has a web application named WebRole1. WebRole1 writes error 
messages to the Windows Event Log. 

Users report receiving an error page with the following message: "Event 26 has occurred. Contact 
your system administrator." 

You need to access the WebRole1 event log. 

Which three actions should you perform? Each correct answer presents part of the solution. 


A. Enable verbose monitoring. 

B. Update the WebRole1 web.config file. 

C. Update the cloud service definition file and the service configuration file. 
D. Run the Set-AzureVMDiagnosticsExtensionPowerShell cmdlet. 

E. Run the Enable-AzureWebsiteApplicationDiagnostic PowerShell cmdlet. 
F. Create a storage account. 


Answer: A,C,F 


Explanation: 

step 1 specify the scheduled TransferLogLevelFilter to Verbose in the diagnostics.wadcfg 

step 2 Update the cloud service definition file and the service configuration file (.cspkg) 

step 3 best practice is to create a separate storage account for logging diagnostics data 

References: http://azure.microsoft.com/en-us/documentation/articles/cloud-services-how-to- 


monitor/ 


Question: 7 


ORDER LIST 

You manage an application hosted on cloud services. The development team creates a new version 
of the application. The updated application has been packaged and stored in an Azure Storage 
account. 

You have the following requirements: 

Deploy the latest version of the application to production with the least amount of downtime. 

Ensure that the updated application can be tested prior to deploying to the Production site. 

Ensure that the original version of the application can be restored until the new version is verified. 
Which four steps should you perform in sequence? To answer, move the appropriate actions from 
the list of actions to the answer area and arrange them in the correct order. 
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Action Answer Area 


Deploy the new package to the Staging slot. 


Create a new cloud service. 


Provide the URL to the development team. 


Deallocate the Staging deployment. 


Deploy the new package to the Production slot. 


Perform VIP Swap, 


Answer: 
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Explanation: 

Once you have uploaded the compiled package to Azure Storage, you would create a new staging 
deployment. You can then provide the URL to the development team. Once approved, you would 
promote the new deployment to production by performing a VIP swap. You can then stop the 
instance of the old production deployment and keep it at hand in the staging slot. 

References: 

http://msdn.microsoft.com/en-us/library/ff803371.aspx 


Question: 8 


You manage a cloud service that utilizes data encryption. 

You need to ensure that the certificate used to encrypt data can be accessed by the cloud service 
application. 

What should you do? 


A. Upload the certificate referenced in the application package. 

B. Deploy the certificate as part of the application package. 

C. Upload the certificate’s public key referenced in the application package. 
D. Use RDP to install the certificate. 


Answer: A 


Explanation: 

You have to upload a .pfx file, and not a .cer file. pfx files contains the private key, while cer files 
contains public and private keys. 

References: hittp://azure.microsoft.com/en-gb/documentation/articles/cloud-services-configure-ssl- 


certificate/H#step3 


Question: 9 


You administer a Windows Server virtual machine (VM). 

You upload the VM to Azure. 

You need to ensure that you are able to deploy the BGInfo and VMAccess extensions. 
What should you do? 


A. Select the Install the VM Agent checkbox while provisioning a VM based on your uploaded VHD. 

B. Select the Enable the VM Extensions checkbox while provisioning a VM based on your uploaded 
VHD. 

C. Install the VM Agent MSI and execute the following Power Shell commands:Svm = Get-AzureVM - 
serviceName Ssvc -Name SnameSvm.VM.ProvisionGuestAgent = StrueUpdate-AzureVM -Name 
Sname -VM Svm.VM -ServiceName Ssvc 

D. Install the VM Agent MSI and execute the following Power Shell commands:Svm = Get-AzureVM - 
serviceName Ssvc -Name SnameSet-AzureVMBGInfoExtension -VM Svm.VMSet-AzureVM Access 
Extension -VM Svm.VMUpdate-AzureVM -Name Sname -VM Svm.VM -ServiceName Ssvc 


Answer: C 
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Explanation: 

You are uploading a VM to Azure (not provisioning a VM from Azure — so therefore needs the VM 
Agent MSI) 

Is VM Agent installed? 

Sx = Get-AzureVM -ServiceName SvmName 

Sx.vm.ProvisionGuestAgent 

If ‘False’ — 

1. Install standalone VM Agent 

2. Inform the Azure platform that the VM now has the agent installed 

Svm = Get-AzureVM -serviceName Ssvc -Name $name Svm.VM.ProvisionGuestAgent = STRUE 
Update-AzureVM —Name $name -VM Svm.VM -ServiceName Ssvc 

References: https://msdn.microsoft.com/en-us/library/azure/dn832621.aspx 


Question: 10 


You manage a cloud service that supports features hosted by two instances of an Azure virtual 
machine (VM). 

You discover that occasional outages cause your service to fail. 

You need to minimize the impact of outages to your cloud service. 

Which two actions should you perform? Each correct answer presents part of the solution. 


A. Deploy a third instance of the VM. 

B. Configure Load Balancing on the VMs. 

C. Redeploy the VMs to belong to an Affinity Group. 
D. Configure the VMs to belong to an Availability Set. 


Answer: B,D 


Explanation: 

Adding your virtual machine to an availability set helps your application stay available during 
network failures, local disk hardware failures, and any planned downtime. 

Combine the Azure Load Balancer with an Availability Set to get the most application resiliency. The 
Azure Load Balancer distributes traffic between multiple virtual machines. 

References: _http://azure.microsoft.com/en-gb/documentation/articles/virtual-machines-manage- 


availability/ 


Question: 11 


You administer an Azure subscription with an existing cloud service named contosocloudservice. 
Contosocloudservice contains a set of related virtual machines (VMs) named ContosoDC, 
ContosoSQL and ContosoWeb!1. 

You want to provision a new VM within contosocloudservice. 

You need to use the latest gallery image to create a new Windows Server 2012 R2 VM that has a 
target IOPS of 500 for any provisioned disks. 

Which PowerShell command should you use? 
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AL | PS:C\> $image = (Get-AzureVMImage | ? { $_..OS -eq "Windows" -and $_.ImageFamily -eq "Windows Server 2012 R2 Datacenter” } | 
Sort-Object PublishDate -Descending | Select-Object -First 1).ImageName 
PS C:\> New-AzureVMConfig -Name "ContosoWeb2" -InstanceSize Small -ImageName $image | Add-AzureProvisioningConfig — 
Windows —AdminUser $adminUser -Password $adminPassword | New-AzureVM 


BPS C\> $image = (Get-AzureVMImage | ? { $_.OS -eq "Windows" -and $_ImageFamily -eq "Windows Server 2012 R2 Datacenter” } | 
Sort-Object PublishDate -Descending | Select-Object -First 1).ImageName 
PS C:\> New-AzureVMConfig -Name "ContosoWeb2" -InstanceSize Basic_Al -ImageName $image | Add-AzureProvisioningConfig — 
Windows —AdminUser $adminUser -Password $adminPassword | New-AzureVM —ServiceName “contosocloudservice" 


C ps C> New-AzureQuickVM -Windows -ServiceName "contosocloudservice" -Name "ContosoWeb2" -ImageName (Get- 
AzureVMImage | ? { $_OS -eq "Windows" -and $_ImageFamily -eq "Windows Server 2012 R2 Datacenter” }).ImageName | ? { $- 
Password $adminPasswd -InstanceSize Small 


D: | (pge\s $image = (Get-AzureVMImage | ? { $_.OS -eq "Windows” -and $_.ImageFamily -eq "Windows Server 2012 R2 Datacenter" } | 
Sort-Object PublishDate -Descending | Select-Object -First 1).ImageName 
PS C\> New-AzureQuickVM -Windows -ServiceName "contosocloudservice" -Name "ContosoWeb2" -ImageName $image — 


Password $adminPasswd —InstanceSize Small 


A. Option A 
B. Option B 
C. Option C 
D. Option D 


Answer: D 


Explanation: 

The New-AzureQuickVM cmdlet sets the configuration for a new virtual machine and creates the 
virtual machine. You can create a new Azure service for the virtual machine by specifying either the 
Location or AffinityGroup parameters, or deploy the new virtual machine into an existing service. 
AdminUsername is not required. 


-AaminUsername <Strin 


Specifies the name for the administrative account to create. 


Aliases none 
Required? false 
Position? named 
Default Value none 
Accept Pipeline Input? false 


Accept Wildcard Characters? | false 
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References: 
https://msdn.microsoft.com/en-us/library/azure/dn495183.aspx 


Question: 12 


DRAG DROP 

You administer an Azure Virtual Machine (VM) named server1. The VM is in a cloud service named 
ContosoService1. 

You discover that the VM is experiencing storage issues due to increased application logging on the 
server. 

You need to create a new 256-GB disk and attach it to the server. 

Which Power Shell cmdlets should you use? To answer, drag the appropriate cmdlet to the correct 
location in the Power Shell command. Each cmdlet may be used once, more than once, or not at all. 
You may need to drag the split bar between panes or scroll to view content. 


PowerShell cmdlets PowerShell command 
CA\PS> Rowershal. command “ContosoServicel” 
Add-AzureDisk 
-Name “server1" | seein -CreateNew -DiskSizeInGB 256 
Add-AzureDataDisk 
-DiskLabel "data1" -LUN 1 | PRENE: Commana 
Add-AzureVhd 
Get-AzureVM 
Get-AzureVMImage 
Update-AzureVM 
Update-AzureVMImage 
Answer: 
PowerShell command 
CAPS> Get-AzureViv “Contososervicel” 
-Mame “serverl” | Add-AzureDataDisk -CreateNew -DiskSize[nGb 256 


-DiskLabel “datal” -LUN 1] Update-AzureVM 


Explanation: 
This example gets a virtual machine object for the virtual machine named “MyVM” in the 
“myservice” cloud service, updates the virtual machine object by attaching an existing data disk from 
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the repository using the disk name, and then updates the Azure virtual machine. 
Windows PowerShell 


C:\PS>Get-AzureVM "myservice" -Name "MyVM" `| Add-AzureDataDisk -Import -DiskName 
"MyExistingDisk" -LUN 0 `| Update-AzureVM 
References: 


http://msdn.microsoft.com/en-us/library/dn495298.aspx 


Question: 13 


Your company has two cloud services named CS01 and CS02. You create a virtual machine (VM) in 
CSO2 named Accounts. 

You need to ensure that users in CSO1 can access the Accounts VM by using port 8080. 

What should you do? 


A. Create a firewall rule. 

B. Configure load balancing. 
C. Configure port redirection. 
D. Configure port forwarding. 
E. Create an end point. 


Answer: E 


Explanation: 


All virtual machines that you create in Azure can automatically communicate using a private network 
channel with other virtual machines in the same cloud service or virtual network. However, other 
resources on the Internet or other virtual networks require endpoints to handle the inbound network 
traffic to the virtual machine. 

References: 
http://azure.microsoft.com/en-us/documentation/articles/virtual-machines-set-up-endpoints 


Question: 14 


You administer a solution deployed to a virtual machine (VM) in Azure. The VM hosts a web service 
that is used by several applications. You are located in the US West region and have a worldwide user 
base. 

Developers in Asia report that they experience significant delays when they execute the services. 

You need to verify application performance from different locations. 

Which type of monitoring should you configure? 


A. Disk Read 

B. Endpoint 

C. Network Out 

D. CPU 

E. Average Response Time 


Answer: B 
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Explanation: 

The question states: “You need to verify application performance from different locations”. The 
question is not asking you to determine WHY the application is slow, it’s asking you to ‘measure’ the 
performance from different locations. 

Endpoint Monitoring monitors your server with HTTP Get requests from locations that you choose. 
References: 


Question: 15 


You are the administrator for three Azure subscriptions named Dev, Test, and Prod. 

Your Azure Power Shell profile is configured with the Dev subscription as the default. 

You need to create a new virtual machine in the Test subscription by using the least administrative 
effort. 

Which Power Shell command should you use? 


OA PS C:\> Select-AzureSubscription -SubscriptionName "Test" 


OB. PS C:\> Set-AzureSubscription -SubscriptionName "Test" -CurrentStorageAccountName “teststorage” 


PS C:\> Select-AzureSubscription "Test" 


OC PSCA> Set-AzureSubscription “Test” -CurrentStorageAccountName "teststorage” 


OD. PS CAs Select-AzureSubscription -SubscriptionName "Test" —Defauit 


A. Option A 
B. Option B 
C. Option C 
D. Option D 


Answer: A 


Explanation: 

Example: Set the current subscription 

This command makes Test the current subscription. 

Windows PowerShell 

C:\PS> Select-AzureSubscription -SubscriptionName Test -Current 
References: 
http://msdn.microsoft.com/en-us/library/dn722499.aspx 


Question: 16 


DRAG DROP 
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You manage an Azure virtual machine (VM) named AppVM. The application hosted on AppVM 
continuously writes small files to disk. Recently the usage of applications on AppVM has increased 
greatly. 

You need to improve disk performance on AppVM. 

Which Microsoft Azure Power Shell cmdlet should you use with each Power Shell command line? To 
answer, drag the appropriate Microsoft Azure Power Shell cmdlet to the correct location in the Power 
Shell code. Each Power Shell cmdlet may be used once, more than once, or not at all. You may need 
to drag the split bar between panes or scroll to view content. 


cmdlets PowerShell code 


CAPS>Get-AzureVM “AppService" -name 
Set-AzureOSDisk 


“AppVM" | cocdiet -LUN 3 
Set-AzureDataDisk 

-HostCaching cindlet | Update 
New-AzureVMConfig 

-AzureVM 
ReadOnly 
WriteOnly 
ReadWrite 

Answer: 
cmdlets PowerShell code 


C:\PS>Get-AzureVM “AppService” -name 
Set-AzureOSDisk 


“AppViV" | Set-AzureDataDisk -LUN 3 
Set-AzureDataDisk 
-HostCaching None | Update 
New-AzureVMConfig : 
-AzureVM 
ReadOnly 
None 
ReadWrite 
Explanation: 


* Set-AzureDataDisk 
Sets the host-cache mode on an existing data disk object. 
* Example: 


This command gets the "MyVM" virtual machine running on the "myservice" cloud service, and then 
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sets the data disk at LUN 2 of the virtual machine to use Nonehost caching. 

Windows PowerShell 

C:\PS>Get-AzureVM "myservice" -name "MyVM" | Set-AzureDataDisk -LUN 2 -HostCachingNone| 
Update-AzureVM 

* Set-AzureDataDisk Parameter: -HostCaching<String> 

Sets the host level caching settings of the disk. Possible values are: None, ReadOnly and ReadWrite 
(). 

When you setup a data disk on a virtual machine, you get three host caching choices: 

The purpose of a cache is to cache data to be read as reading from a cache is faster than reading from 
a disk. 

There is no performance benefit in caching the log files as these will not be re-read by the 
application. Therefore, we need the logs to be written directly to disks rather than being written to 
cache first then disk (Read) or written to the cache only (Read/Write). 


Question: 17 


DRAG DROP 

You administer a virtual machine (VM) that is deployed to Azure. The VM hosts a web service that is 
used by several applications. 

You need to ensure that the VM sends a notification in the event that the average response time for 
the web service exceeds a pre-defined response time for an hour or more. 

Which three steps should you perform in sequence? To answer, move the appropriate actions from 
the list of actions to the answer area and arrange them in the correct order. 


Action Answer Area 
From the Monitor page. add a metric for Response Time 
for the endpoint. 

From the Monitor page, add a rule for the Response 
Time of the endpoint 
From the Dashboard page, add a rule for the endpoint 

tat 

From the Configure page. add a rule for the Response 
Time of the endpoint 
From the Configure page. add a monitoring endpoint for 
the virtual machine 


From the C onfigure Page, add a metric for Response 


Time for the endpoint 


Answer: 
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Explanation: 

1. From configure page, add a monitoring endpoint for the virtual machine 

2. From the monitor page, Add a metric for the Response Time for the end point 

3. From the Monitor page, add a rule for the response time of the end point. 

References: 
http://azure.microsoft.com/en-us/documentation/articles/web-sites-monitor/#webendpointstatus 


Question: 18 


DRAG DROP 

You administer an Azure Virtual Machine (VM) named CON-CL1. CON-CL1 is in a cloud service named 
ContosoService1. 

You discover unauthorized traffic to CON-CL1. You need to: 

Create a rule to limit access to CON-CL1. 

Ensure that the new rule has the highest precedence. 

Which Azure Power Shell cmdlets and values should you use? To answer, drag the appropriate cmdlet 
or value to the correct location in the Power Shell command. Each cmdlet or value may be used once, 
more than once, or not at all. You may need to drag the split bat between panes or scroll to view 
content. 
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cmdiets and values PowerShell command 
CAPS» $acl= wien al a 
=— CAPS> oo ee —Addrule -ACL $acl 
Deny . -order cmdet or value Action omdlet or value 
New-AzureAdConfig ` ~RemoteSubnet “171.100.0.1/24" 
Set-AzureAciConfia 
100 
300 
-addrule 
-setrule 
0 
Update-AzureVM 
Answer: 


Explanation: 

* Example 1 

This example uses two commands: 

The first command creates a new ACL object and stores it in a variable named Sacl1. 

The second command updates the ACL object with a rule that permits incoming network traffic only 
from remote subnet 10.0.0.0/8. 

Windows PowerShell 

PS C:\> Sacl1 = New-AzureAclConfigC:\PS> Set-AzureAclConfig —AddRule —ACL Sacl1 —Order 100 — 
Action permit —RemoteSubnet “10.0.0.0/8” — 

*Parameter: -Order<Int32> 

Specifies the relative order in which this rule should be processed compared to the other rules 
applied to the ACL object. The lowest order takes precedence. 0 is allowed. 

References: 
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http://msdn.microsoft.com/en-us/library/dn495192.aspx 
http://blogs.technet.com/b/heyscriptingguy/archive/2013/08/31/weekend-scripter-creating-acls- 


for-windows-azure-endpoints-part-1-of-2.aspx 


Question: 19 


HOT SPOT 

Your company network has two branch offices. Some employees work remotely, including at public 
locations. You manage an Azure environment that includes several virtual networks. 

All users require access to the virtual networks. 

In the table below, identify which secure cross-premise connectivity option is needed for each type 
of user. Make only one selection in each column. 


Secure cross-premise connectivity Branch Office Remote Users 
method Users 


Site-to-site 


Multi-site 


Point-to-site 


Answer: 


Secure cross-premise connectivity Branch Office Remote Users 
method Users 


Site-to-site 


Multi-site 


Point-to-site 
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Explanation: 

* A site-to-site VPN allows you to create a secure connection between your on-premises site and 
your virtual network. 

* A point-to-site VPN also allows you to create a secure connection to your virtual network. In a 
point-to-site configuration, the connection is configured individually on each client computer that 
you want to connect to the virtual network. 

* Use a point-to-site configuration when: 

You want connect to your virtual network from a remote location. For example, connecting from a 
coffee shop. 

You have a site-to-site connection, but have some clients that need to connect from a remote 
location. 


Question: 20 


HOT SPOT 

You create a virtual network named fabVNet01. 

You design the virtual network to include two subnets, one named DNS-subnet and one named 
Apps-subnet, as shown in the exhibit. (Click the Exhibits button.) 


Virtuel Network Address Spaces 


ADDRESS SPACE STARTING P ome >> USABLE ADORESS FANG 
y SOUNN) 
ODGwW2S acao (26 4 ODJ POOG 
! 
| 
SUBNETS 
ubre wai 2733 10100 -10D051 x 
Apps -subnet 100037 nN v 10.30 34 - 100.039 x 


NETWORK PREVIEW 


C> fabvNeta2? 


+i v 


In the table below, identify the number of IP addresses that will be available for virtual machines 
(VMs) or cloud services in each subnet. Make only one selection in each column. 
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Answer Area 


Available IP Addresses DNS-subnet Apps-subnet 


Answer: 


Answer Area 


Available IP Addresses DNS-subnet Apps-subnet 


Explanation: 
References: 
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http://msdn.microsoft.com/en-us/library/azure/jj156074.aspx 


Question: 21 


You administer an Azure solution that uses a virtual network named FabVNet. FabVNet has a single 
subnet named Subnet-1. 

You discover a high volume of network traffic among four virtual machines (VMs) that are part of 
Subnet-1. 

You need to isolate the network traffic among the four VMs. You want to achieve this goal with the 
least amount of downtime and impact on users. 

What should you do? 


A. Create a new subnet in the existing virtual network and move the four VMs to the new subnet. 
B. Create a site-to-site virtual network and move the four VMs to your datacenter. 

C. Create a new virtual network and move the VMs to the new network. 

D. Create an availability set and associate the four VMs with that availability set. 


Answer: A 


Explanation: 

To isolate the VMs, we could use Windows Firewall or Network Security Groups (NSG) but they’re not 
options here. 

If we move the VMs to a new subnet in the same virtual network, traffic can still flow to VMs on the 
other subnet. We would still need additional security such as an NSG; therefore, answer A is 
incorrect. 

The answer is to create a new virtual network and move the VMs to the new network. This would 
provide the required isolation without the need for additional security such as an NSG. 


Question: 22 


You administer an Azure virtual network named fabrikamVNet. 

You need to deploy a virtual machine (VM) and ensure that it is a member of the fabrikamVNet 
virtual network. 

Which two actions will achieve the goal? Each correct answer presents a complete solution. 


A. Run the following Azure PowerShell cmdlet: New-AzureRmVM 

B. Run the following Azure PowerShell cmdlet: New-AzureQuickVM 

C. Run the following Azure PowerShell cmdlet:New-AzureAfhnityGroup. 
D. Update fabrikamVNet's existing Availability Set. 


Answer: A,B 


Explanation: 

The New-AzureQuickVM cmdlet sets the configuration for a new virtual machine and creates the 
virtual machine. You can create a new Azureservice for the virtual machine by specifying either the 
Location or AffinityGroup parameters, or deploy the new virtual machine into an existing service. 
References: 


https://www.certkillers.net 


Questions & Answers PDF Page 22 


http://msdn.microsoft.com/en-us/library/dn495183.aspx 
https://docs.microsoft.com/en-us/powershell/resourcemanager/azurerm.compute/v2.2.0/new- 
azurermvm 


Question: 23 


You manage a large datacenter that has limited physical space. 

You plan to extend your datacenter to Azure. 

You need to create a connection that supports a multiprotocol label switching (MPLS) virtual private 
network. 

Which connection type should you use? 


A. Site-to-site 

B. VNet-VNet 

C. ExpressRoute. 
D. Site-to-peer 


Answer: C 


Explanation: 

ExpressRoute allows you to securely add compute and storage capacity to your existing datacenter. 
With high throughput and fast latencies, Azure will feel like a natural extension to your datacenter so 
you enjoy the scale and economics of the public cloud without having to compromise on network 
performance. 

References: 

http://azure.microsoft.com/en-us/services/expressroute 


Question: 24 


You manage a cloud service named fabrikamReports that is deployed in an Azure data center. 

You deploy a virtual machine (VM) named fabrikamSQL into a virtual network named fabrikamVNet. 
FabrikamReports must communicate with fabrikamSQL. 

You need to add fabrikam Reports to fabrikamVNet. 

Which file should you modify? 


A. the network configuration file for fabrikamVNet 

B. the service definition file (.csdef) for fabrikamReports 

C. the service definition file (.csdef) for fabrikamSQL 

D. the service configuration file (.cscfg) for fabrikamReports 
E. the service configuration file (.cscfg) fabrikamSQL 


Answer: D 


Explanation: 

The service configuration file specifies the number of role instances to deploy for each role in the 
service, the values of any configuration settings, and the thumbprints for any certificates associated 
with a role. If the service is part of a Virtual Network, configuration information for the network must 
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be provided in the service configuration file, as well as in the virtual networking configuration file. 
The default extension for the service configuration file is .cscfg. 

References: 

https://msdn.microsoft.com/en-us/library/azure/ee758710.aspx 


Question: 25 


You manage an application deployed to virtual machines (VMs) on an Azure virtual network named 
corpVnet1. 

You plan to hire several remote employees who will need access to the application on corpVnet1. 
You need to ensure that new employees can access corpVnet1. You want to achieve this goal by using 
the most cost effective solution. 

Which two actions should you perform? Each correct answer presents part of the solution. 


A. Create a VPN subnet. 

B. Enable point-to-point connectivity for corpVnet1. 
C. Enable point-to-site connectivity for corpVnet1. 
D. Create a gateway subnet. 

E. Enable site-to-site connectivity for corpVnet1. 

F. Convert corpVnet1 to a regional virtual network. 


Answer: C,D 


Explanation: 
You need a point to site and a gateway subnet. 
References: https://azure.microsoft.com/en-us/documentation/articles/web-sites-integrate-with- 


vnet/ 


Question: 26 


DRAG DROP 

You have an Azure Virtual Network named fabVNet with three subnets named Subnet-1, Subnet-2 
and Subnet-3. You have a virtual machine (VM) named fabVM running in the fabProd service. 

You need to modify fabVM to be deployed into Subnet-3. You want to achieve this goal by using the 
least amount of time and while causing the least amount of disruption to the existing deployment. 
What should you do? To answer, drag the appropriate Power Shell cmdlet to the correct location in 
the Power Shell command. Each cmdlet may be used once, more than once, or not at all. You may 
need to drag the split bar between panes or scroll to view content. 
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PowerShell cmdlets PowerShell Command 
PS CA> $VM = PowerShell cmolet fabP “fahVM" 
Get-AzureVM SiCA> SVM abProd” “faby 
PS CÀ > Powershell cmaet 'Subnet-3" VM $VM 
Get-AzureVMImage 
PS C:\> PowerShell crndiet "fabProd” "fabVM" -VM $VM 
Set-AzureSubnet 
Update-AzureVM 
New-AzureVM 
Set-AzureVNetConfig 
Update-AzureVMimage 
Answer: 
PowerShell Command 
PS CAs $VM = Get-AzureVM “fabProd” “fabVM" 
PS Cis Set-Azuresubnet “Subnet-2" -VM SVM 
PS Gii» Update-AzureVM "fabProd” “fabVM" -VM $VM 
Explanation: 
Example 


This example changes the size of the virtual machine "MyVM3", running in "MySvc1", to "Medium". 
Windows PowerShell 

C:\PS>Get-AzureVM -ServiceName "MySvc1" -Name "MyVM3" `| Set-AzureVMSize —InstanceSize 
"Medium" `| Update-AzureVM 

References: 

http://msdn.microsoft.com/en-us/library/dn495230.aspx 


Question: 27 


ORDER LIST 

You manage a solution deployed in two Azure subscriptions for testing and production. Both 
subscriptions have virtual networks named fabVNet. 

You plan to add two new virtual machines (VMs) in a new subnet. 

You have the following requirements: 

Deploy the new VMs to the virtual network in the testing subscription. 

Minimize any errors in defining the network changes. 

Minimize the work that will be required when the change is made to the production virtual network. 
Which three steps should you perform in sequence? To answer, move the appropriate actions from 
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the list of actions to the answer area and arrange them in the correct order. 
Action Answer Area 


Add an accessibility group to the network configuration 
file. 


Add a subnet to the Virtual Network using the 
Management Portal. 


Deploy the new VMs to the new subnet. 


Add an accessibility group to the Virtual Network using 
the Management Portal. 


Deploy the new VMs to the new accessibility group. 


Export the network configuration. 


Add a subnet to the network configuration file. 


Import the network configuration. 


Answer: 
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Explanation: 

Create a subnet in the Testing subnet, Deploy the VMs to this new subnet, and Export the network 
configuration for later importing it to Production. 

References: 

http://msdn.microsoft.com/en-us/library/azure/jj156206.aspx 


Question: 28 


HOT SPOT 

You manage an Azure Web Site named contosoweb. 

Some users report that they receive the following error when they access contosoweb: 

“http Status 500.0 - Internal Server Error.” 

You need to view detailed diagnostic information in XML format. 

Which option should you enable? To answer, select the appropriate option in the answer area. 


Answer Area 


Application diagnostics 


APPLICATION 
LS 
(FILESTS TEM) 


Site diagnostics 


WEE SERVER 
Liam 


DETAILED 
ERROR 
MESSAGES 


FAILED 
REQUEST 
TRACING 


Answer: 
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Answer Area 


Application diagnostics 


APPLICATION 
LOGGING Fi ON 


(FILESYSTEM) 


Site diagnostics 


WEB SERVER ; 
LOGGING 


DETAILED 
ERROR 
MESSAGES 


FAILED 
REQUEST 
TRACING 


Explanation: 
Failed Request Tracing is the only option that produces its output in XML files as specified in the 
question. 


Question: 29 


DRAG DROP 

You manage an Azure Web Site named contososite. 

You download the subscription publishing credentials named Contoso-Enterprise.publishsettings. 
You need to use Azure Power Shell to achieve the following: 

Connect to the Contoso-Enterprise subscription. 

Create a new App Setting namedisCustomwith a value of True. 

Restart theWeb App. 

Which commands should you use? To answer, drag the appropriate Azure PowerShell command to 
the correct location in the solution. Each command may be used once, more than once, or not at all. 
You may need to drag the split bar between panes or scroll to view content. 


https://www.certkillers.net 


Questions & Answers PDF Page 28 


Azure PowerShell Commands Solution 

PS C\> ESE PLEMENT c\Contoso\Enterprise.publishsettings 
Set-AzureWebsite 

PS CA > Select-AzureSubscription Contoso-Enterprise 
Get-AzurePublishSettingsFile PS C:\> $setting = @{‘IsCustom” = “true”} 

E Azure PowerShell Command ito 

Import-AzurePublishSettingsFile PS C:\> contososite ~AppSettings $setting 

PS C\> a ec contososite 
Start-AzureWebsite 
Restart-AzureWebsite 
Show-AzureWebsite 

Answer: 


Explanation: 

* Import-AzurePublishSettingsFile 

Imports Azure subscription datafrom a .publishsettings file downloaded from the management 
portal. 

* Set-AzureWebsite 

Configures a website running in Azure. 

* Restart-AzureWebsite 

Stops and then starts the specified website. 

References: 

http://msdn.microsoft.com/en-us/library/azure/dn495266.aspx 


Question: 30 


Your company has a subscription to Azure. You plan to deploy 10 websites. 
You have the following requirements: 

Each website has at least 15 GB of storage. 

All websites can useazurewebsite.net. 

You need to deploy the 10 websites while minimizing costs. 

Which web tier plan should you recommend? 


A. Free 
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B. Small Business 
C. Standard 
D. Basic 


Answer: C 


Explanation: 

Standard offers 50 GB of storage space, while Basic only gives 10 GB. 
References: 
http://azure.microsoft.com/en-us/pricing/details/websites 
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